10-30-03 17:49 



FROM-MERCHANT £ OIULD P.C. 



206-342-6201 



T-690 P. 004/01 7 F-528 



AppL No. 09/503,215 
AmdL dated October 30, 2003 
Reply to Office action of July 1> 2003 



Jn the Claims: 




(Cuirently amended) A computeri2ed method for creating an instrumented 



executable file, the method comprising: 

modiiyin^^ executable file to invoke having an original fimcrion with a user-supplied 
function in place of gffl nrimn al function, the user-supplied function injecting a fault into the 
executable file ; and 

retaining access information of the original function^ the access information enabling the 
\ 

user-supplied function to invoke the original function. 




2, (Original) The computerized method for creating an instrumented executable 

• \ 

file as in claim 1, wherein the user-supplied function is modified to invoke the original function 

\ 

usmg the retained access infomaation of the original function. 

3 . (Previously presented) computerized method for creating an 
instrumented executable file as in claim 1, wherein the user-supplied function is in a dynamic 
link library. 




4. (Onginal) The computenzed method for creating an instrimiented executable 

\ 

file as in claim 1, wherein the user-supplied function is not exported during compilation. 



5- (Original) The computerized method for creating an instrumented executable 

\ 

file as in claim 1, wherein the original function and the user-supplied function have identical 

\ 

prototypes, \ 



6. (Original) The computerized method for creating an instrumented executable 
file as in claim 1, where the user-supplied function is stored in a module^ that is separate ftom the 
executable file. \^ 
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\ y> 7^ (Previously presented) Tne computerized method for creating an 

instrumented executable file as in claim 1, wherein modifying the executable file is performed 
using user-spefeified set points. 



8. (Ori'ginal) The computerized method for creating an instrumented executable 
file as in claim 7, wherein modifying the executable file finther comprises determining whether 
the original fiinction implements the thiscall calling convention, and when the determination is 
positive, adding instructions^ to the executable file to perform: 

pushing the register Aat holds the 'this* pointer onto the stack from the invoked original 
function site when the detemiining indicates that the fimction implements a thiscall calling 
convention; and \^ 

swapping the return value of^he invoking original function on the stack and the register 
that holds the 'this* pointer value on tl^e stack when the determining indicates that the function 
implements a thiscall calling conventiomy 



9 , (Previously presented) 



The computerized method for creating an 



instrumented executable file as in claim 7, whefe^n modifying the executable file further 
comprises enabliag the user-supplied function to invoke the original function in the executable 
file. 



10. (Original) The computerized method for creating an instrumented executable 
file as in claim 9, wherein enabling the user-supplied function to invoke the original fimction in 
the executable file further comprises: \ 

adding a jiunp in the user-supplied function to a function that retrieves the address 
of the original function; and \ 

adding a jump in die user-supplied-fimction that invokes the original function 
using the address of the original function. 

1 1 . (Original) The computerized method for creating an instrumented executable 
file as in claim 1, further comprising enabling the user-supplied function to alterbehavior. 
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^12. (Original) The computerized method for creating an instrumented executable 
file as in claim 11, wherein enabling the user-supphed function to alter behavior is performed in 
response to\ata- 

13. (Original) The computerized method for creating an instrumented executable 
file as in claim 12Wherein the data is retrieved from an initialization file. 

1 4. (Original) The computerized method for creating an instrumented executable 
file as in claim 1, wherein the retaining further comprises: 

saving the Mdress of an original function in a threaded local storage variable; and 
creating an ratry in a function lookup table associating the address of the original 
fimction with the name of the opginal fiinction, wherein the function lookup table is in the 
instnnnented executable file. 

15. (Currently amended) ^ computerized method for executing an instrumented 
executable file comprising: 

modifying tlie instrumented ^ecutable file to lavoke ha vi ng an - original function 
vv4Ar a user-supplied function in place of an ori^nal function, the user-supplied fiinction injecting 
a fault into the executable file, the user-supplied function having a jump to the original function; 

saving the address of die original fbntc^ion in a threaded local storage variable; 

and 

invoking the user-supplied function using the address. 

16. (Original) The computerized method for executing an instrumented 
executable file as in claim 15, fiirfher comprising creating a mastbr lookup table at initiahzation 
wherein the master lookup table associates the base address of the i^tnIalemed executable file to 
the address of a function lookup table in the instrumented executable fil 
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\<l- (Original) The computerized method for executing an instrumented 
executable ^le as in claim 15: 

*^wherein original function is in a dynamic link library; and 
rfierein the saving and the invoking is performed by a stub function of the 
original function^Mie stub function being located in the instrumented executable file. 



1 8. (Original) The computerized method for executing an instrumented 
executable file as in clai^ IS: 

wherein original function i$ embedded in the instrumented executable file; and 
wherein the s^braig and the invoking is performed by the original function. 

1 9. (Original) Th^omputerized method for executing an instrumented 
executable file as id claim 15, furtiiCT comprising invoking the original function from within the 
user-supplied function using the threaded local storage variable. 

20. (Original) The computeldzed method for executing an instrumented 
executable file as in claim 19, wherein invokmg the original function further comprises: 

pushing the register that holds thfe^'this* pointer onto the stack from the invoked 
original function site when the determining indicaWs that the fiinction implements a thiscall 
calling convention; and 

swapping the return value of the invokii^ original function on the stack and the 
register that holds the 'this* pointer value on the stack wW3;ji the detemiining indicates that the 
function implements a thiscall calling convention. 



21 . (Currently amended) A con^>uterized method f^ instrumenting an imported 
function in an executable file for testing by callers of the imported function, the method 
comprising: 

adding a wr^per of the imported function to an import data block; 
adding a stub function for the imponed function whereidsthe stub function 
comprises an instruction that saves the address of the imported import function to a threaded 
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Ibcal^storage variable and replaces an access to the imported impe fi function with an access to 
the user-supplied functio n, the user-supplied function iniecting a fault into the executable file: 



and 



adding an entry in a function lookup table of the imported function. 



22. OSurrently amended) The computerized method for instrumenting an imported 
function in an executable file as in claim 21. 35, the method further comprising: 

determining if the prototype of the imported function is correctly specified; and 
indicatingvan error when the determining indicates an incorrectly specified 
prototype of the imported ftinction. 

23 . (Currently amendM) A computerized method for instrumenting an embedded 
ftinction in an executable file for teslpg by callers of the embedded function, the method 
comprising: 

modifying the ae embedde^iimction to invoke wife a user-supplied function in 
place of the embedded function using a wrapt>e r. the user-supplied function iniecting a fauh into 
tlie executable file: and 

adding an entry in a function lookup'Hgble of the address of the embedded 

fiinction, 

24. (Original) A computerized method for instrumenting an embedded function 
in an executable file as in claim 23, wherein the redirecting is ace^raphshed by an instruction 
that causes a jump to the user-supplied function. 



25. (Original) A computerized method for instrumenting embedded function 
in an executable file as in claim 23, the method further comprising: 

determining whether the prototype of the embedded fimctioti is^rrectly 

specified; and 
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\ndicatmg an error when the determining whether the prototype of the embedded 
^ function is correctly specified indicates an incorrectly specified prototype of the embedded 

function. 

26. (Origin'^) A computerized method for instrumenting an embedded function 
in an executable file as in claim 23, wherein the function lookup table is in the executable file. 

Claim 27 (Canceled)^ 

28- (Currently amended) A computerized system comprising: 

means for modifying an executable file to invoice haying an original function with 
a user-supplied function in place of m original function, the user-supplied junction injecting a 
fault into the executable file; and 

means for retaining acces^nformation of tlae original function, the access 
information enabling the user-supplied fimction to invoke the original fimction. 

29. (Currently amended) A computtaized system comprising: 

an executable file having a call to an original fimction) the original function 
having an identity comprising a name and a parame^ prototype; 

means for modifying the executable fileto invoke th e original function witli a 
user-supplied function in place of an original function, the user-supplied function injecting a 
fault into the eixecutable file; and \ 

means for configuring the user-supplied fimction to retrieve stored access 
infonnation of the original fimction. 




30. (Currently amended) A computerized system comprising: 

an executable file having a jump to an original function, the original function 

having an identity comprising a name and a parameter prototype; 

a first software component having a user-supplied function that includes a jump to 

the original fimction; and 
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a\$econd software component for: 
r^eiving the identity of the original function; 
receiving the identity of the user-supplied function^ 

instrumenting the executable file by modifying the executable file to invoice ;he 
identity - ol^hoViginal function v , ith the identity of the user-supplied function in place of 
the identity of th>5 origiTial function, the identity of the user-supplied function injecting a 
fault into the executable file : and 

storing the original finiction address in the executable file in association with the 
name of the original instrumented function. 

3L (Currently ameniled) A computerized system comprising: 
a first module of machine-readable code comprising: 

a call to an original function, the call being directed to a user-supplied 
function; and \ 

a first data strucojre associating the identity of the original function with 
the location of the original funcuon; and 

a second module comprisidg the user-supplied function^ linked to the first module 
and a jump to the original function ^ the useAsupplied function iniectiTig a fault into the machine- 
readable code . \ 

32. (Original) The computerized system as in claim 3 1 , 
wherem the first data structure comftfises a function lookup table readily available 

for verifying that the threaded local storage variable Mntains the correct original instrumented 
function address; and \ 

wherein the second module comprises a oVnamic linked library. 

33. (Original) The computerized system as in claim 3 1 , further comprising a 
second data structure associating the location of the first data Vucture with the location of the 
first module, \ 
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36. YCurrently amended) A cgmputer-readable medium having computer-executable 
instructions to [fa]] cause a computer to perform a method comprising: 

modifying an executable file to invoke having -i an - original function with a user- 
supplied function inylace of an original function^ the user-supplied fixaction iniecting_a fault into 
the executable file : an^ 

retainingNaccess information of the original function, the access information 
enabling the user-supplied function to invoke the original function. 



Claims 37-40 (Cancelled) 



41 . (Currently amended) A computer-implemented method for cotjfiguiing an 
executable file^ the executable file Waving an access to an original function, the computer- 
implemented method comprising: 

replacing the access to th^original function with an access to a user-supplied 

function; and 

retaining access information Associated with the original function, the access 
information enabling the user-supplied function^ to invoke tiie original functio n, the user-sunolied 
function iniecting a fault into the executable file . 



42, (Previously presented) The coiAputer-implemented method of Claim 41 , 
further comprising configuring the user-supplied function to invoke the original function using 
the access information associated with the original funcl^n, 

43 , (Previously presented) The computer-'implemented method of Claim 4 1 , 
wherein replacing the access to the original fimction with theVccess to the user-supplied function 
is performed by modifying the executable file. 

44, (Previously presented) The computer-implerdtnted method of Claim 41 , 
wherein replacing the access to the original fimction with the access tb the user-supplied fimction 
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""fe^perfoimed by modifying set points stored in a computer-readable medium separate firom the 
executable : 




45. (Previously presented) The computer-implemented method of Qaim 41, 
wherein retaining access infbmiation associated with the origiaal function includes saving the 
address of the original function. 

46. (Previously presented) \ The computer-implemented method of Claim 4 1 , 
wherein retaining access information associ^d witli the original function includes associating 
the name of the original fmction with the addre^of original function using a function lookup 
table. 



47, (Previotisly presented) The computer-nnplemented method of Claim 46, 
further comprising invoking the original function using the foncttbn lookup table. 
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